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Abstract. Michel proved that for a one-parameter family of elliptic curves 
over Q(T) with non-constant j(T) that the second moment of the number of 
solutions modulo p is p 2 + 0(p 3 / 2 ). We show this bound is sharp by studying 
y 2 = x s +Tx 2 + 1. Lower order terms for such moments in a family are related 
to lower order terms in the n-level densities of Katz and Sarnak, which describe 
the behavior of the zeros near the central point of the associated L-functions. 
We conclude by investigating similar families and show how the lower order 
terms in the second moment may affect the expected bounds for the average 
rank of families in numerical investigations. 



1. Introduction 

Let £ be a one-parameter family of elliptic curves (equivalently, an elliptic sur- 
face) over Q(T): 

y 2 + ai (T)xy + a 3 {T)y = x 3 + a 2 (T)x 2 + a 4 (T)x + a 6 {T), a t {T) e Z[T]. (1.1) 

For each integer t we have an elliptic curve Et over Q, with Nt(p) the number of 
solutions modulo p. Set at(p) = p — Nt(p). If a\{T) = asiT) = we have 



a {i>] ^ x 3 + a 2 (t)x 2 + aj{t)x + a 6 (t) ^ (| ^ 



x mod p 



We are interested in evaluating the second moment for the family: 

t mod p 

For one-parameter families of elliptic curves with j(T) non-constant, Michel |Mic| 
proves A 2t £{p) — p 2 + 0(p 3 ^ 2 ) by using the Lefschetz-Groethendieck trace formula. 
We show his result is sharp by constructing a family where the second moment has 
a term of size p 3 / 2 . 

Moments of the number of solutions modulo p provide enormous amounts of 
information about the family. Rosen and Silverman |RoSi| prove a conjecture of 
Nagao (unconditionally for rational elliptic surfaces, conditional on Tate's conjec- 
ture in general) that the first moment is related to the rank of the family over Q(T), 
denoted rank £(Q(T)): 

v lim E a *W = -rank£(CQ(T)). (1.4) 

p<X t mod p 

In |MillllALM| it is shown how to construct families with moderate rank by choosing 
the di(T) so that the first moment is computable and large. 

Another application is in the connections between number theory and random 
matrix theory [KaSall IKaSa2j . In showing the behavior of the low lying zeros 
(zeros near the central point) of L-functions of a family of elliptic curves agrees 
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with that of eigenvalues near 1 of orthogonal groups, the only needed inputs are 
the first and second moment of the number of solutions modulo p; to first order 
all families of elliptic curves with rank r over Q(T) agree with the same random 
matrix ensemble (see |Mil2] . though a similar result with a global rather than local 
rescaling of the zeros is implicit in Sil2 ). An analysis of the lower order terms in 
the first and second moments leads to breaking this universality; i.e., seeing lower- 
order family dependent behavior in the low lying zeros. See jMilll lYolj for more 
details on family dependent behavior. One application of these correction terms 
is a refinement on predicting the number of curves in a family with rank above 
the family rank. While these corrections vanish in the limit of large conductor, 
they lead to slight modifications of excess rank bounds for conductors in the range 
accessible by computers. 

In we determine the second moment of at (p) for a specific family, showing 
Michel's result is sharp. In J^we analyze how the lower order terms in Michel's 
theorem are related to bounds for the average rank of the family. 

2. The Second Moment for y 2 — x 3 + Tx 2 + 1 
We may expand the Legendre symbol (|) in (|1.2|l by 

(~) = ^E(£HM, e p (x) = e 2 ™/P. (2.5) 

Here G p = J2 a mod p (p) e p ( a ) ^ s ^ ne Gauss sum, which equals ^fp for p = 1 mod 4 
and i^/p for p = 3 mod 4. See, for example, |BEW) . Using Gauss sums to evaluate 
Legendre sums is a common technique; we sketch an alternate approach which 
avoids Gauss sums in Remark 12.21 

For the family £ : y 2 = x 3 + Tx 2 + 1, j(T) = - 2 ^ & 27 and thus by Michel's 
Theorem A 2i £(p) = p 2 + 0{p 3 / 2 ). We determine an exact formula for A 2 ^{p): 

Theorem 2.1. For the one-parameter family £ : y 2 — x 3 + Tx 2 + 1 over Q(T) , for 
p > 2 the second moment of at (p) is 



A 2 , £ (p) = Yl a ^) 2 = 

t mod p 




where ri3,2,p denotes the number of cube roots of 2 modulo p. For any [a, b] C [—2, 2] 
there are infinitely many primes p = 1 mod 3 such that 

A 2 , £ (p)-(p 2 -n 3 , 2 . pP -l) g [a-p 3 ' 2 ,b-p 3 ' 2 ]. (2.7) 
Proof. Combining l|1.2|l and l|2.5|l yields 

^,eip) = E E E 

t mod p x mod p y mod p 

= E E - (-) e p ( c (* 3 + 1) - % 3 + !)) E e P d™ 2 - d y 2 W ■ 

x,y mod p c,d—l t mod p 

(2.8) 

above we used the complex conjugate of l|2.5|l in expanding ( v +1 p +y - )■ The two 
Gauss sum expansions give 1 = ~. It will be convenient to set g(x,y) = 

CrpCxp P 

(x-y)(x 2 y 2 - (x + y)). 

Note c and d are invertible modulo p in 12. 8|) . If the numerator in the t- 
exponential is non-zero, the i-sum vanishes. Thus it suffices to study l|2.8|) for 
cx 2 = dy 2 mod p. If exactly one of x and y vanishes, then cx 2 ^ dy 2 mod p. Hence 
x and y are both zero or non-zero. If both are zero the t-sum gives p, the c-sum 



x A + 1 + x 2 1\ (y 3 + 1 + yH 



P 



P 
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gives G p , the <i-sum gives G p , for a total contribution of p. If x and y are non-zero 
then we must have d = cx 2 y~ 2 mod p. The i-sum gives p. Thus (|2.8(l is 

^ ^ i / x 2 2\ 

^ 2> f(p) = P+ V V- — - )e p (cy- 2 (x 3 y 2 + y 2 -x 2 y 3 ~x 2 ))p 

p—1 p—X 

= p + Y Y e p (°y ~ 2 ( x -v)( x2 y 2 - ( x + y))) 

x,y = X c—1 
p—X p—1 p—1 

= p+ Y Y e p ( c v~ 2 9( x ,y)) - Y 1 

x,y = 1 c— sc,3/=l 

= p + Y Y e p ( c y~ 2 9(x, v)) - (p - !) 2 

x : y—l c— 

= p • #{x, y ^ mod p : g(x, y) = mod p} + p - (p — l) 2 , (2.9) 

where the last equality follows from the fact that if g(x, y) = mod p then the c-sum 
is p and otherwise it is 0. We are left with counting how often g(x,y) = mod p 
for x, y non-zero. 

Whenever x — y then g(x, y) = mod p; therefore there are p—1 solutions from 
x = y. Consider now x 2 y 2 = x + y mod p, which we may rewrite as a quadratic in 
y: x 2 y 2 — y — x = mod p. By the Quadratic Formula modulo p (recall p is odd), if 
the discriminant 4a; 3 + 1 is a non-zero square modulo p there are two distinct roots, 
if it is not a square modulo p there are no roots, and if the discriminant vanishes 
there is one root. Equivalently, if ( 4z +1 ) = 1 (respectively, —1 or 0) there are two 
(respectively, none or one) solutions to x 2 y 2 = x + y mod p. 

Recall neither x nor y is allowed to be zero. If y = then x 2 y 2 = x + y mod p 
reduces to x = 0. Hence our solutions have x, y ^ mod p, and for a non-zero x the 
number of non-zero y with x 2 y 2 = x + y mod p is 1 + ( + ) . Hence the number 
of non-zero pairs with x 2 y 2 = x + y mod p is 

a=l \ V ^ / / s mo d p v ^ 7 

We must be careful about double counting solutions. If both x — y = mod p 
and x 2 y 2 = x + y mod p, then we find x = 2x mod p. As x ^ mod p, we obtain 
x 3 = 2 mod p. We have double counted all pairs (x, x) with a; a cube root of 2 
modulo p. Let 713,2^ denote the number of cube roots of 2 modulo p; In3 2.pl < 3. 
We have shown 



#{x,y € {1, ...,p- 1} : y) = modp} 



a; mod p 



n 3,2,p 



E 

£ mod p 



4x 3 + 1 



= 2p-3-n 3 , 2 , P + >, ( z — ). (2.11) 

Thus (|2.9|) becomes 



A-2x(p) = p \2p - 3 - ra 3) 2, p 



P 2 - ™3,2,pP - 
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To complete the analysis, we need to determine the size of J2 X mod P ( 4z p +1 ) ■ Note 
this is the number of solutions modulo p to the elliptic curve y 2 — 4x 3 + 1, and 
this curve is equivalent to E : y 2 = x 3 + 16. This curve has analytic rank 0, as can 
be seen from L(E, 1) ~ .5968. It has complex multiplication, and for p = 2 mod 3, 
a E{p) = 0. Write Oe(p) = 2^/pcos 8e, p - As E has complex multiplication, for 
p = 1 mod 3 the distribution of the angles 0e, p is known; all we need is that for 
any [9, 8'] C [0, n], a positive percent of the time 9e, p € [6, 0']. This implies that 
a typical o,e(p) is of size y/p if p = 1 mod 3, and hence for any [a, b] C [—2, 2] we 
can find infinitely many primes p with 

A 2 Ap)-(p 2 -^,2,pP-±) G [a.p 3 / 2 >p 3 / 2 ]. (2.13) 



□ 



Note that if p = 2 mod 3, as x i— » a: 3 mod p is an automorphism then n^^, P = 1 
and oe(p) = 0. Thus, at least half the time, ^4 2i f(p) = p 2 — p — 1. 

Remark 2.2. A few words should be said about how we cooked up this family. If 
instead of y 2 = x 3 + Tx 2 + 1 we had y 2 — x 3 + Tx + 1, we would have found the 
condition d = cxy~ x mod p. As we have (— ) this would lead to (—)(—) times a 
similar c-exponential. It would not suffice to determine how often a similar g(x,y) 
vanished; we would need to know the value of (^) . Our analysis was greatly aided 

by the presence of (^y-)- We also want to change the order of summation and 
do the t-sum first, which basically forces our family to be at most quadratic in t, 
and such that g(x, y) factors easily. Instead of expanding by using Gauss sums, 
we could write the product of Legendre symbols l|2.8|l as the Legendre symbol of 
h(x,y,t), where h is quadratic in t with leading term x 2 y 2 t 2 : 

( x 3 + 1 + x 2 t \j ^ y 3 + 1 + y 2 t 

(x 2 y 2 ■ t 2 + (y 2 {x 3 + 1) + x 2 (y 3 + 1)) • t - {x 3 + l)(y 3 + 1) 
V P 

We execute the i-sum first. Quadratic Legendre sums are easily determined; what 
matters is the discriminant modulo p. After some algebra we find the discriminant 
is g(x,y) (with g(x,y) as before), and then the argument proceeds identically. 
See IMIITllATMl for more on determining tractable families where the summation 
can be done in closed form. These families will be quadratic in t, although not 
necessarily in Weierstrass form. 




3. Other Families and Applications to Excess Rank 



We give some additional examples of families where the first and second moments 
can be determined exactly; see |Mill| for the calculations (though we provide cal- 
culations of a representative set of these families in Appendices El through ■ 

Recall 1.3, 2, p denotes the number of cube roots of 2 modulo p, and set Co(p) = 

( 4x 3 + l \ 



(f) + (f),Cl(P)= Ex 



mod p \ p 



and c 3/2 (p) =pJ2 x 



mod p V p 
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Family 




MAp) 


y 2 


= x 3 + Sx + T 





pi _ 


y 2 


= x 3 + 2 4 (-3) 3 (9T+l) 2 





( 2p 2 -2p p=2 mod 3 
1 P=l mod 3 


y 2 


= x 3 ±4(4T+2)a; 





| 2p 2 -2p p=lmod3 
|^ P=3 mod 3 


ii 2 


= x 3 + (T+ l)x 2 +Tx 





p 2 - 2p - 1 


y 2 


= x 3 +x 2 + 2T+1 





P 2 -2P~(f) 
P 2 - n 3 . 2 ,pP- 1 + c 3/2 (p) 
P 2 -P-Ci{p) -CoO) 
P 2 -P-Ci(p) -c (p) 


y 2 
y 2 
v 2 


= x 3 + Tx 2 + 1 
= x 3 - T 2 x + T 2 
= x 3 - T 2 x + T 4 


-p 

-2p 
-2p 



The first family is the family of all elliptic curves; it is a two parameter family 
and we expect the main term of its second moment to be p 3 . Note that except for 
our family y 2 = x 3 + Tx 2 + 1, all the families £ have ^.^(p) = p 2 — h(p)p + O(l), 
where h(p) is non-negative. Further, many of the families have h{p) — wig > 0. 
Note c\(p) is the square of the coefficients from an elliptic curve with complex 
multiplication. It is non-negative and of size p for p ^ 3 mod 4, and zero for 
p = 1 mod 4 (send x i— > — x mod p and note {^-j = — 1). It is somewhat remarkable 
that all these families have a correction to the main term in Michel's theorem in 
the same direction, and we analyze the consequence this has on the average rank. 
For our family which has a p 3 / 2 term, note that on average this term is zero and 
the p term is negative. 

Consider a one-parameter family of elliptic curves £ of rank r over Q(T). With 
our normalizations, under GRH the non-trivial zeros of E t are 1 + ijt. It S K- We 
typically study t G [N, 2N] with N — > oo. Let Ct be the conductor of the elliptic 
curve E t , and let logi? = ^ Ylt—N l°gC* be the average log-conductor. For many 
families there is an integer a such that log Ct ~ log N a for most curves; this is true 
for the families listed above (see [Mill) for the calculations). Assuming the Birch 
and Swinncrton-Dyer conjecture, by Silverman's specialization theorem eventually 
all curves E t have rank at least r, and under natural standard conjectures (see 
|Hep a typical family will have equidistribution of signs of the functional equations. 
What is typically seen in studying the ranks of curves in a family is that roughly 
30% have rank r and 20% rank r + 2, while about 48% have rank r + 1 and 2% rank 
r + 3. Random matrix theory predicts that in the limit 50% should be rank r and 
50% rank r + 1 for an average rank of r + h, markedly different from the observed 
(approximately) r + \ + .40. See [Fell IFe2l IWa| for numerical investigations and 
[Brl llFBl iFPl IMicI Istfel lYo2j for theoretical bounds of the average rank. 

The excess rank question is whether this disagreement persists or is a result of 
small data. We often expect the rate of convergence for problems such as this to be 
like the logarithm of the conductors. As the conductors are often at most 10 12 , it 
is reasonable to believe the data is misleading (especially as random matrix theory 
predicts sub- families of higher rank of size TV 3 / 4 , and for small N such families are a 
noticeable percentage; see for example |( JKRSI IDFEl IHol IHM1 IMail l( )nol IRoSil IST1 
lYuj for discussions of random matrix predictions and results from number theory) . 

For an even Schwartz test function <fi with supp(^) C (— cr, c), the 1-level density 
(which is basically just the sum of the explicit formula for each curve) is defined by 

t=N it V 7 t=N p 6-^X6/ 

2 TV 

' \ - \ - log? 1 7f 2l °SP \ ( n2 , n /^ loglog^ / Q1cn 
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If <j) is non-negative, we obtain a bound for the average rank in the family by 
restricting the sum to be only over zeros at the central point. The error O y l °f^°^ R 1 
comes from trivial estimation and ignores probable cancellation, and we expect 
O f i gfl j or smaller to be the correct magnitude. For most families logi? ~ log N a 
for some integer a. 

The main term of the first and second moments of the at(p) give r (f)(0) and 
— ^<fi(0), respectively, in (|3.15() . Assume the second moment of at(p) 2 is p 2 — msp + 
O(l), rri£ > 0. We have already handled the contribution from p 2 , and —m^p 
contributes 

N ^ log i? \ logRJ p 2 p ty> 

= bgE^H^J^- ( } 

Thus there is a contribution of size lo * R . A good choice of test functions (see 
Appendix A of jiLSj ) is the Fourier pair 

= sin 2 (27rf^ ~ = f£zM if | u | < a 
(2nx) 2 ' 1 otherwise. 

Note (f)(0) — (f)(0) = j = ^21, and evaluating the prime sum in l|3.16|) gives 

S2 „ 7j55_ "«) "t^,. (3, 8) 

\ (7 <J Z log it / log R 

Let rt denote the number of zeros of E t at the central point (i.e., the analytic 
rank). Then up to our O ( lo f^°% R J errors (which we think should be smaller), we 
have 

1 ^ . (f>(0) ( 1\ . /.986 2.966 \ m £ , s 

AveRan W] (^) < - + r + ± + - -^p) Ps- W 

1 ' cr 2 \ (7 <T Z log /t / log R 

Remark 3.1. The Density Conjecture states that the 1-level density (in the limit) 
should hold for all cr. In that case, the lower order terms from the second moment 
will not contribute to the bound for the average rank, as their contribution vanishes 
as cr — > oo. Of course, the agreement with random matrix theory is a statement 
about the limit as N — > oo; the correct finite-conductor model is still unknown 

Let us examine the boost the —msp term from the second moment gives to the 
upper bound for the average rank. As remarked, if our 1-level density were true for 
all cr then there would be no contribution from the correction term to the second 
sum, nor would the — term contribute, and we would obtain the average rank is 
bounded by r + | . 

Let us assume we know the 1-level density up to cr = 1 . (This is well beyond the 
range of current technology; the best result to date is for the family of all elliptic 
curves, where Young |Yo2j proves we may take any a < |). Assume m,£ = 1. The ^ 
term would contribute 1, the lower correction would contribute .03 for conductors 
of size 10 12 , and thus the average rank is bounded byl + r+i + .03 = r + i + 1.03. 
This is significantly higher than Fermigier's observed r + 4 + .40. 

If we were able to prove our 1-level density for a — 2, then the ^ term would 
contribute i, and the lower order correction would contribute .02 for conductors of 
size 10 12 . Thus the average rank would be bounded by 4 + r+ 4 + .02 = r + 4 + .52. 
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While the main error contribution is from - , there is still a noticeable effect from the 
lower order terms in Ai,s(j>)- Moreover, we are now in the ballpark of Fermigier's 
bound; of course, we were already there without the potential correction term. 

It seems hopeless to think about obtaining a 1-level density for any family of 
elliptic curves with support a — 2 or more. Iwawniec, Luo and Sarnak |1LS| obtain 
such large support for families of weight k cuspidal newforms of square-free level 
N, but only because of great averaging formulas (the Bessel-Kloosterman expan- 
sion in the Petersson formula) available for the family; the corresponding averaging 
formulas for elliptic curves are much weaker. We use the periodicity of at{p) as 
a function of t mod p to analyze complete sums of the moments for each prime; 
however, the error from the incomplete sum is bounded by Hasse and contributes 
a large error (this problem is avoided in |ILS| because the Petersson formula gives 
us sums over a basis of newforms, and there is no incomplete piece to be approxi- 
mated). The random matrix models for the behavior of the zeros near the central 
point have been shown to hold as the conductors tend to infinity; in the small con- 
ductor ranges investigated, it is not surprising that there is disagreement. While it 
would be desirable to find a good model for small conductors (similar to Keating 
and Snaith's KeSnl , KeSn2 modeling zeros of £(s) at height T by N x N matrices 
with N — ^ ) ; we can identify potential family dependent lower order terms in 
the 1-level density arising from lower order terms in the second moment. For finite 
conductors these do lead to slightly larger predicted upper bounds for the average 
rank in a family. 
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The following appendices contain calculations for the second 
moment of a representative set of the other families mentioned 
in $31 and for completeness proofs of standard quadratic Le- 
gendre sums. For general one-parameter families of elliptic 
curves, there are not closed form expressions for the moments. 
Our hope is that these families may be useful for other inves- 
tigations. 



Appendix A. The Family y 2 = x 3 + T 2 
Theorem A.l. For the family £ : y 2 = x 3 + T 2 , 

, , ^ fV - 2p if p = 1 mod 3 , 

A2,S(P) = / - f o ( A - 2 °) 

10 it p = 2 mod 3. 

Proof. If p = 2 mod 3 then a 2 (p) = cLS X I ^ X mod p is an automorphism. 
Assume p = 1 mod 3. 



^(p) = E E E 

f mod p sc mod p y mod p 



X s +t 2 \ fy s + t 



P /VP 



E E E ^ 3+ * 2 ^ y3+ * 2 

t— 1 cc mod p y mod p 

- E E E ©(^)(^ 

- E E E 

a: mod p y mod p i mod p 

We use inclusion / exclusion to reduce to xy =/= 0. If x — 0, the i-sum vanishes 
unless y = 0, in which case we get p. Similarly if y = 0, the i and x-sums give p. 
We subtract the doubly counted contribution from x = y = 0, which gives p. Thus 

x=ly=l t(p) V ^ / \ ^ / 

By Lemma IdTTI the t-sum is (p- l)(^y-) if p|(iz: 3 - y 3 ) 2 and -(^-) otherwise. 
As p = 6m + 1, let g be a generator of the multiplicative group Z/pZ. Solving 
^3a _ ^3b moc j p yields b — a, a + 2m, or a + 4m. Thus, x 3 = y 3 mod p three times, 
and in each instance y equals x times a square (1, g 2m , g 4m ). 

p _i p _i p-Ip-i / 3,.3\ 

map) - E E p-EE^ ^ J 

a:— 1 2 = 1 3 cc=l y — 1 



■ p-p 



= (p-l)3p + p-p 2 

= 2p 2 - 2p. (A.23) 

□ 
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Appendix B. The Family y 2 = x 3 + x 2 + T 
Theorem B.l. For the family £ : y 2 = x 3 + x 2 + T we have 



A 2 ,s{p) = p 2 -2p-p( — ). (B.24) 



Proof. 



map) = EEE 

t=0 x=0 y=0 



V 



p - lp ~ lp - 1 't+(x 3 +x 2 )\ft + (y 3 + y 2 ) 



P / \ P 



ggg ft 2 + ((•'"' + ) + ar - !r))i + (.. ;[ + ; - )(//' + »r) 



t=0 x=0y=0 



P 

(B.25) 



Let 5(x, y) = (x 3 +x 2 ) — (y 3 + y 2 ); note S(x, y) 2 is the discriminant of the quadratic 
regarded as a function of t. The i-sum is p — 1 if p\S(x, y) and —1 otherwise. Note 

5(x,y) = {x-y)(y 2 + (x + l)y+(x 2 + x)). (B.26) 

The first factor is congruent to zero when x — y; for fixed x, the discriminant of the 
second factor is (x + 1) 2 — 4(x 2 +x) = 1 — 2.t — 3x 2 . Thus the number of solutions of 
the second factor, for fixed x, is 1 + ( 1 ~ 2:r p ~ 33: ) . As the discriminant of 1 — 2x — 3x 2 
is 16, summing over x for p > 2 yields p — (— J by Lemma lD.21 

We must be careful about double counting. If both factors are congruent to zero, 
then 3x 2 + 2x = 0, on = 0, — 2 ■ 3" 1 . Hence we always double count two solutions. 



ll + 1 ,-[-l)-2 



p— 1 p i 

x=0y=0 



p 2 -2p-p( — \. (B.27) 



□ 



Appendix C. y 2 — x 3 ~ T 2 x + T 2 

Consider the family £ : y 2 = x 3 — T 2 x + T 2 . We calculate the first moment 
of at(p), which shows the family is of rank 2 over Q(T), and then determine the 
second moment. 



Theorem C.l. For £ : y 2 = x 3 - T 2 .t + T 2 , A h£ (p) = ~2p. Thus by Rosen and 
Silverman the family has rank 2 over Q(T). 
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Proof. 



£*(p) -EE 

t(p) t(p) x(p) 



EE 

t=l x{p) 

p-1 

EE 

t=i 

EE 

t(p) x(p) 



X 3 - t 2 X + t 



X 3 -t 2 x + t< 
V 

p-1 

-EE 

t=l x(p) 



t 3 x 3 - t 3 x + i' 



t 2 \ (t(x 3 -x) + l 



t(x 3 - x) + 1 



Eft 



'■(/') 



E E 

t(p) a=0,±l 



t(x 3 -x) + l 



EE 0+EE 



t(p) a=0,±l xP 

= 3p + 0-p = 2p. 
Theorem C.2. For £ : = x 3 - T 2 x + T 



E E 

t + 1^ 



t(.T 3 - x) + 1 



(C.28) 
□ 



E 

a(p) 



(x 3 — a;) 



P / VP 



P 2 + 0(p). 



(C.29) 



Proof. 



t(p) 

- EE 

t(p) 

p-1 

= EE 

p-1 

= EE 

p-i 



x 3 - t 2 x + t 2 \ fy 3 - t 2 y + t 2 



x 3 - t 2 x + t 2 \ fy 3 - t 2 y + t 2 



t 3 x 3 - t 3 x + t 2 \ (t 3 y 3 - t 3 y + t 2 



E E ( ^ ~ x) + ^ ^ (y3 ~ y) + 1 



*— 1 x,y(p) 
p-i 

- EE 

t-0 x,y(p) 

= EE 

*(p) 



v p 



t{x 3 - x) + 1\ (t(y 3 - y) + 1 



Eft 



<(x 3 - x) + l\ (t(y 3 -y) + l 



V 



P 



x,y(p) 
P 2 - 



In Lemma ID.2I we showed that, if a and b are not both zero, 

p — ' at 2 + bt + c \ Up- 1) (2) if p|6 2 - 4ac 



E 

t=o 



"(f) 



otherwise. 



(C.30) 



(C.31) 



12 



STEVEN J. MILLER 



In Ai£ (p) we have 

a = (x 3 - x)(y 3 - y) = y(x 2 - l)x(y 2 - 1) 

b = (x 3 ~ x) + (y 3 - y) 

c = 1 

5{x,y) = b 2 -4ac=((x 3 -x)-(y 3 -y)y. (C.32) 

We use inclusion / exclusion on x 3 — x and y 3 — y vanishing. Assume first that 
3 — x equals zero (happens three ways: x — 0,±1). Then we have Y^t ( 



x 



which is 3p from our A 1: z(p) computation, giving 3 • 3p. Similarly we get 3 • 3p if 
y 3 — y is zero. We subtract the doubly counted x 3 —x = y 3 — y = (nine ways), 
each of which gives ^ t (|) — p. Hence the contribution from at least one of x 3 — x 
and y 3 — y vanishing is 9p. 

Assume x, y £ {0, ±1}. When is 5(x, y) — (x 3 — x) — (y 3 — y) = 0(p)? 

6(x,y) = (x-y)-(x 2 + xy + y 2 -l). (C.33) 



Therefore 



x,v*a,±i VP/ x,y^Q,±l \ P / 

(C.34) 

Clearly, S(x,y) = 0(p) if x = y, which happens p — 3 times. If x = y then the 
second factor is 3a; 2 — 1, which is congruent to zero at most twice. 

When is 5-2{x, y) = x 2 + xy + y 2 — 1 = 0? By the Quadratic Formula mod p, 



P 2 - 



-x±yi^3x^ 

y = 2 ' ( ^ 

which reduces to finding when 4 — 3x 2 is a square mod p. We get two values of y 
if it is equivalent to a non-zero square, one value if it is equivalent to zero, and no 
values if it is not equivalent to a square. When solving <5 2 (a;,2/) = 0(p), we make 
sure such y ^ {0, ±1}. If y = 0, x = ±1; y = 1, x = or —1; y — —1, x = or 
1. Therefore, we don't get an excluded y (and similarly if we reverse the rolls of y 
and x). Thus the number of solutions to 6s(x, y) = 0(p) is 

p-2 



p-2 

E 

x=2 



1 



3a- 



3 + E 



3x' 



P 



x(p) V y 7 

We again use Lemma fD. 21 The discriminant now is 2 — 4 ■ (—3) ■ 4. For p > 5, 
p does not divide the discriminant, hence this sum is — (-^). 

Thus, for a; 7^ 0, ±1, the number of solutions with x 2 +xy + y 2 = 1 is p — 6— (— J ; 
the number with x — y = is p — 3. At most two of the pairs (x,y) satisfying 
x 2 + xy + y 2 — 1 = 0(p) also satisfy x = y. These pairs satisfy 3a; 2 = 1, thus, 
if (|) = 1 we have doubly counted two solutions; if it is —1, there was no double 



counting. Thus, the number of doubly counted pairs is 1 + (^) , and the total number 
of pairs is 



2 »- 10 -{t)-(S ] - (a37) 

f(x 3 -x)(y 3 -y)\ _ 



When x = y ^ 0, ±1, clearly (— — — = 1. Hence these terms contribute 1. 
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Consider x ^ y and x 2 + xy + y 2 — 1 = 0. Thus x, y ^ 0, ±1. Then y 2 — 1 = 
— x(x + y) and x 2 — 1 = — y(x + y) and 

( {x 3 -x)(y 3 -y) ^ = ( x{x 2 - l)y(y 2 - 1) ^ = ( x 2 y 2 (x + y) 2 

As long asi^ —y, this is 1. If x — —y then we would have x 2 — x 2 + x 2 — 1 = 0. 
This implies x = ±1, which cannot happen as x, y 7^ 0, ±1. Therefore all pairs have 
their Legendre factor +1, and we need only count how many such pairs there are. 
We've previously shown this to be p + O(l), therefore 




M,e (p) = p 



2p - 10 - 



E 

X,J/^0,±1 



= P 



E 

a;(p) 



(x 3 - x)(y 3 - y) 



+ 9p-p 2 



(C.39) 



As i 3 - 1 is a non-singular elliptic curve, by Hasse its sum above is bounded 
by Ap. It has complex multiplication and analytic rank 0. For p = 3 mod 4 its 
a E (p) — (change variables x — > — x); for the remaining p, the angles of ^f^=f are 
uniformly distributed. Hence A 2 ,g(p) = p 2 + 0(p). □ 

Remark C.3. The reason this calculation succeeds is we have a very tractable 



expression for x(x 2 — l)y{y 2 — 1) when 



xy + y — 1 = mod p. It was 



non-trivial to find a family with high rank over Q(T) and A 2> s(p) computable. 
Appendix D. Quadratics Sums of Legendre Symbols 
For completeness we include proofs of standard sums of Legendre symbols. 
Lemma D.l. For p > 2 



S(n) 



p-i 

E 

x=0 



Til 



P 



n 2 



P 



1 



if p I ni - ri2 
otherwise. 



Proof. Shifting x by — n 2 , we need only prove the lemma when n 2 
(n,p) — 1 as otherwise the result is trivial. For (a,p) = 1 we have 

p-i 



(D.40) 
0. Assume 



S(n) = 



Hence 



E 

x=0 
p-1 

E 

x=0 
p-1 

E 

p i p— 1 



p 



■ a x x 



Sin) 



p-i EE 

1 a=lx=0 
p-1 p-1 

p - 1 EE 



a=0£C=0 
p-1 



/ an + x 
\ P 

fan + x 

V P 

p-i 



a 1 x 



5(an) 



(D.41) 



1 

£C = 



1 x 1 x\ x / an -t 



- 1 



0-1 



(D.42) 
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Where do we use p > 2? We used J2a=o ( an p X ) = ® f° r i n iP) = !• This is true 
for all odd primes (as there are quadratic residues, non-residues, and 0); 
for p = 2, there is one quadratic residue, no non-residues, and 0. □ 

Lemma D.2 (Quadratic Legendre Sums). Assume a and b are not both zero mod 
p and p > 2. Then 



p-i 



, afi+bt + c \ = fO-l)(f) ifp|6 2 -4ac 
^ V P J otherwise. 

Proof. Assume a ^ 0(p) as otherwise the proof is trivial. Let 6 = 4~ 1 (fe 2 — 4ac). 
Then 

^ ^ at 2 + bt + c ^ _ ^ ) ^ fl2t2 + bat + ac ^ (d 44) 



= E 

t=0 

p-1 

= E 

p-1 

- E 

t=0 

p-1 

= E 



— 1 / a\ ft 2 + bt + ac 



PJ \ P 



— / a\ A 2 + fa + 4- x 6 2 + ac - 4- 1 6 2 



P/ V P 



^ 'a\ ({t + 2-!&) 2 - 4-!(6 2 - 4ac) 



PJ \ P 



p —' / a \ ft 2 - 5 



PJ V P 

^ /i 2 - 8 



jE 



If (5 = mod p we get p — 1- If (5 = ?7 2 , 77 7^ 0. then by the Lemma TP. II 

We note that Yst=o (^""p"^) ^ s the same f° r au non-square <5's (let 5 be a generator 
of the multiplicative group, <5 = g 2k+1 , change variables by t — > g fc i). Denote this 
sum by S 1 , the set of non-zero squares by 1Z, and the non-squares by J\f. Since 
E?=o (^) = we have 

5=0 t=0 \ * / t=0 \F / S£Kt=0 V ^ / 5 £ AAt=0 

= (p-l) + ^(-l) + ^S = (D.46) 
Hence S = — 1, proving the lemma. □ 
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